$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: kIvFQjIIn6yvHpI1pIlN7KXHc+kqLBgSc6J2Owpzkwg= Subject key identifier: 22:7B:7D:61:3D:09:6B:10:81:21:8B:3D:C8:62:B8:D3:D6:66:CF:F6 Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 6B9EF47B53EE454C80AF52887E433521EDD1AFDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: 0117 Signing time: Thu 16 Apr 2026 22:21:39 +0000 Manifest this update: Thu 16 Apr 2026 22:16:39 +0000 Manifest next update: Mon 20 Apr 2026 09:45:39 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo=) 2: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: orAoUQmLyGbeANL4M6LSy53X5aMXzU5EOjtn+MwFAZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9e:f4:7b:53:ee:45:4c:80:af:52:88:7e:43:35:21:ed:d1:af:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Apr 16 22:16:39 2026 GMT Not After : Apr 20 09:45:39 2026 GMT Subject: CN=227B7D613D096B1081218B3DC862B8D3D666CFF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:0f:9f:01:4c:4e:a6:aa:d3:56:78:5b:c3: d7:8d:09:b4:09:de:3c:5f:13:61:e7:06:11:3f:da: 63:fd:04:63:71:10:3f:43:39:32:37:1a:fc:f6:26: cc:aa:f8:cc:a6:56:d0:db:49:e9:f5:57:7a:e5:98: c4:f1:1a:b1:e7:a8:10:b5:b5:17:95:0e:db:44:13: 86:7b:34:21:b0:e2:b9:29:7f:d3:33:4e:63:23:82: 22:e6:e8:15:ac:4b:2d:bf:e0:63:0a:42:d0:6a:4c: ce:65:62:91:c2:9d:31:f9:1d:7f:49:eb:5a:f9:50: b4:9d:dd:e4:65:76:74:56:d1:de:5a:22:f2:d7:bd: 89:81:49:9a:bd:14:8b:45:94:d9:e4:d1:79:f9:f7: e9:ce:4e:95:49:57:71:5a:31:1c:47:69:bc:35:7c: f4:7f:50:30:60:9d:18:b8:ba:33:19:ec:75:7e:a9: 0a:58:fa:7f:0b:9e:7c:61:cb:6f:57:7d:b8:8f:3c: 85:57:ec:a4:f1:f8:03:35:bc:26:72:74:e8:f1:e8: c1:a2:0a:28:b9:cc:d9:b8:7c:51:86:37:e0:8a:64: 9e:de:43:14:6d:e2:d7:9d:90:70:70:4b:f8:63:03: 51:bf:e6:2e:0f:68:14:d6:a3:43:35:ef:6c:63:c6: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7B:7D:61:3D:09:6B:10:81:21:8B:3D:C8:62:B8:D3:D6:66:CF:F6 X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e1:f2:f5:29:51:4c:c1:7b:93:a8:41:9d:af:c3:cf:3a:5b: 37:98:99:b0:29:c2:a9:da:fa:3d:94:fc:d5:d3:54:45:66:62: 62:ad:50:84:07:88:ed:01:44:0c:96:e6:db:b7:bc:30:49:d5: f9:11:fc:14:81:f8:7f:66:4b:4c:a1:fc:b0:47:e1:a0:d8:6d: b0:c9:5c:06:22:65:c2:36:98:32:14:1d:a3:16:b8:2d:62:a2: 0d:93:86:33:96:65:3f:83:9d:49:2a:21:fc:bc:0f:74:3b:52: c7:c9:cc:89:7e:b5:ad:da:80:05:ac:22:ef:40:58:c5:81:97: 09:41:2c:7f:27:95:7f:51:ca:e7:3c:ff:81:18:fa:c3:7a:f2: d7:b5:55:0e:fc:85:bf:26:ea:24:b5:c0:bf:92:8e:f7:22:e0: 04:17:f3:fb:dd:ce:bb:7d:30:07:db:49:ad:ba:0b:ca:4c:42: 84:2f:bc:9b:0a:1d:c4:28:9b:49:b5:d4:e9:f5:d1:4d:90:39: 50:72:ef:df:8e:4a:3a:5b:8a:23:cf:8d:25:1c:03:46:5c:14: f1:af:5c:f2:73:e0:c1:ca:45:dc:f9:d8:d1:12:b1:bc:30:4e: ef:7d:04:96:82:2d:ff:65:91:ff:a5:34:d0:bc:6a:dd:93:cf: 39:56:ca:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa570e1PuRUyAr1KIfkM1Ie3Rr9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNjA0MTYyMjE2MzlaFw0yNjA0MjAwOTQ1MzlaMDMxMTAvBgNV BAMTKDIyN0I3RDYxM0QwOTZCMTA4MTIxOEIzREM4NjJCOEQzRDY2NkNGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxeA+fAUxOpqrTVnhbw9eNCbQJ 3jxfE2HnBhE/2mP9BGNxED9DOTI3Gvz2Jsyq+MymVtDbSen1V3rlmMTxGrHnqBC1 tReVDttEE4Z7NCGw4rkpf9MzTmMjgiLm6BWsSy2/4GMKQtBqTM5lYpHCnTH5HX9J 61r5ULSd3eRldnRW0d5aIvLXvYmBSZq9FItFlNnk0Xn59+nOTpVJV3FaMRxHabw1 fPR/UDBgnRi4ujMZ7HV+qQpY+n8Lnnxhy29XfbiPPIVX7KTx+AM1vCZydOjx6MGi Cii5zNm4fFGGN+CKZJ7eQxRt4tedkHBwS/hjA1G/5i4PaBTWo0M172xjxgOxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUInt9YT0JaxCBIYs9yGK409Zmz/YwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzh8vUpUUzBe5OoQZ2vw886WzeYmbApwqna +j2U/NXTVEVmYmKtUIQHiO0BRAyW5tu3vDBJ1fkR/BSB+H9mS0yh/LBH4aDYbbDJ XAYiZcI2mDIUHaMWuC1iog2ThjOWZT+DnUkqIfy8D3Q7UsfJzIl+ta3agAWsIu9A WMWBlwlBLH8nlX9Ryuc8/4EY+sN68te1VQ78hb8m6iS1wL+Sjvci4AQX8/vdzrt9 MAfbSa26C8pMQoQvvJsKHcQom0m11On10U2QOVBy79+OSjpbiiPPjSUcA0ZcFPGv XPJz4MHKRdz52NESsbwwTu99BJaCLf9lkf+lNNC8at2TzzlWylE= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:59 2026 by rpki-client